Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: z6MntJ+uz23LZdcXeZDalXfpwufgvRsY1xwap4SxPeA=
Subject key identifier: F0:9D:7E:38:BE:7D:6A:9E:0E:FD:69:8A:23:2B:8A:6B:DA:37:5A:09
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 01991F1DFEB51BCB9AC1DB1EB2636214970E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0B24
Signing time: Sat 06 Sep 2025 13:01:23 +0000
Manifest this update: Sat 06 Sep 2025 13:01:23 +0000
Manifest next update: Sun 07 Sep 2025 13:01:23 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: E+bTFO4woOJoEfloq+VE5A+XcptjqZA0wq4gUzwGLEU=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:1d:fe:b5:1b:cb:9a:c1:db:1e:b2:63:62:14:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Sep 6 13:01:23 2025 GMT
Not After : Sep 7 13:01:23 2025 GMT
Subject: CN=f09d7e38be7d6a9e0efd698a232b8a6bda375a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:89:24:0f:0a:51:ef:c9:f7:f2:fc:44:1e:
40:e3:99:63:60:d3:52:28:30:6e:b7:45:5a:2e:45:
e4:ab:bc:4f:78:19:bc:d1:4d:e6:8a:d6:af:85:e9:
18:61:f6:5f:19:2a:b5:8c:fa:aa:2e:9e:17:cc:b0:
66:fb:66:4d:3a:d9:e1:40:41:1d:02:56:04:24:8f:
32:a0:0d:65:18:2e:ef:ab:36:9b:6a:ff:f2:29:a1:
c0:97:5e:af:49:ce:94:9b:0a:91:4f:99:02:0f:d5:
62:69:78:e9:ed:5a:5d:dd:68:14:7e:48:6e:46:8a:
f3:5a:6c:5d:80:31:c6:57:2e:c7:87:c5:0f:7b:33:
cc:67:96:6d:0d:91:bc:d1:90:7f:e1:72:f8:77:f2:
59:19:e9:58:b8:3c:61:d5:7b:3f:78:e6:15:cd:f2:
c1:8f:5e:7a:b2:45:ee:21:71:32:d5:1e:40:2a:e7:
db:97:08:9d:23:dc:0a:87:86:71:cf:c2:9c:1f:c6:
ab:35:b5:bd:d5:07:35:a6:1a:38:94:ee:95:18:7f:
b2:3f:ff:01:5b:5b:72:03:79:13:87:28:51:0d:d8:
00:49:4f:06:12:32:55:f7:01:07:29:ad:48:aa:63:
4a:f6:b0:f2:da:38:99:2c:e4:2c:5c:4c:cf:3e:a2:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:7E:38:BE:7D:6A:9E:0E:FD:69:8A:23:2B:8A:6B:DA:37:5A:09
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:8a:cb:2b:a6:8f:c8:77:d0:bb:ab:be:84:38:ce:28:f3:
c4:12:2b:cd:ae:8f:01:26:1e:52:6e:51:8f:ec:77:d2:88:b1:
28:3f:b7:f4:14:bb:13:1c:93:d8:6d:67:42:96:36:f2:3a:60:
1f:bb:e7:a9:af:d0:52:70:60:32:ea:e8:86:13:60:86:bd:dc:
1f:22:88:a3:b3:56:df:ee:38:45:a6:7f:a2:77:8e:b2:1d:01:
0f:56:9b:e7:f4:5c:ab:19:10:5c:e9:63:32:98:b8:11:13:62:
a6:ee:15:f0:72:cb:1b:0e:8b:6a:66:62:3a:d2:66:c7:36:8a:
7e:47:a4:b1:b6:b1:a1:e2:a9:5e:d3:f3:63:5a:0d:aa:3f:cb:
43:1c:d9:f3:ae:ff:e8:6b:69:ef:78:80:9c:78:e2:31:18:f8:
93:c4:15:e6:74:7f:67:ab:81:5a:c1:a7:a7:4a:e1:78:f2:f9:
af:29:bc:1b:20:82:58:0f:ca:6e:f4:e1:1c:15:46:90:3e:51:
67:c6:8f:d3:d8:cb:ee:08:2d:67:f7:09:84:68:da:af:55:fc:
95:26:65:0c:a3:64:8e:88:a5:27:e5:b5:e7:56:51:8c:63:05:
c9:d4:9e:45:d7:d9:fd:c6:03:62:b7:58:c8:2d:7d:91:00:b0:
6b:00:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:02:08 2025 by rpki-client